GitLab

allocate a reusable buffer for validating MACs

It turns out this was a pretty large source of allocations (by number). We might
as well just reuse the same buffer over and over.

switch to the buffer-pool package

The API is significantly cleaner and safer.

update gogo protobuf

and regenerate the protobufs with gogo faster

make secio a proper go-conn-security transport

Also, secio now checks the remote peer ID as early as possible in the handshake. This should allow us to abort misdials much earlier.

Coverage Improvement

This adds a test for the session interface which runs through different
possible session parameters. We perform three main checks:

1) Ensure we got the remote peer ID
2) Ensure we got the remote public key
3) Ensure we can exchange generic data

Add a constant for the default supported exchanges, ciphers, and hashes.
This will allow users and tests to reset the parameters to the default if
they change them.

Read() and Write() wrap ReadMsg() and WriteMsg() so they might as well
have test coverage too.

use minio sha256 library

It's significantly faster than the built-in one on ARM, and some Intel
processors (e.g., the gateways).

refactor secio handshake

1. Respect context. Before, we didn't respect the context when writing/reading
the final nonce.
2. Don't make assumptions about connection buffering. Read/write handshake
messages in parallel.
3. Return messages from ReadMsg to the buffer pool.
4. Close the connection on timeout. We can't reuse it at this point as there may
be an outstanding writer/reader (and we don't allow parallel reads/writes).